Code execution via excessive container permissions

Improper privilege management in CKAN Docker Base before 2.9.9 or 2.10.1 allows authenticated users to execute code via excessive ckan permissions. The ckan account owns application code and configuration files and can invoke sudo inside the container, so an arbitrary file-write flaw can become code execution or privilege escalation. Exploitation requires authenticated access that supplies such a file-write path; the advisory does not report unauthenticated reachability or exploitation in the wild.